Red Hat Security Advisory

RHSA-2025:0063

kernel security update

Released 2025-01-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.99.1.el9_2
Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.99.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.99.1.el9_2, kernel-64k-devel-5.14.0-284.99.1.el9_2 +9
Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.99.1.el9_2, kernel-5.14.0-284.99.1.el9_2, kernel-64k-5.14.0-284.99.1.el9_2 +29

Fixes 3 records

TI-2024-27401 CVE-2024-41040 · GHSA-g37m-wg3j-xw8v

net/sched: Fix UAF when resolving a clash

MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix UAF when resolving a clash KASAN reports the following UAF: BUG: KASAN: slab-use-after-free in tcf_ct_flow_table_process_conn+0x12b/0x380…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01 Published 2024-07-29 Partial fix · 5.10.222, 5.13 +5 CWE-416

TI-2024-35592 CVE-2024-53122 · GHSA-x34g-xjxv-fc48

mptcp: cope racing subflow creation in mptcp_rcv_space_adjust

LOW 39

In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00528 Published 2024-12-02 Partial fix · 5.15.174, 6.1.119 +3 CWE-362

TI-2024-17702 CVE-2024-26830 · GHSA-wvxq-2p8c-hj2m

i40e: Do not allow untrusted VF to remove administratively set MAC

LOW 36

In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down (VF t…

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00233 Published 2024-04-17 Partial fix · 6.1.79, 6.6.18 +2